Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E275B/AB2022301DA911E2B095C4A408B02CD2/fxYazxZAB-j32MdxFaWjnQQ2SPg.mft
File:                     fxYazxZAB-j32MdxFaWjnQQ2SPg.mft (raw, json)
Hash identifier:          bIr+lIggvYkSlhdFGZhYnS7okt08Kah4+XIQI7e9lLY=
Subject key identifier:   A1:A9:E5:6E:BB:12:08:78:0D:DC:74:E1:A2:52:D4:7C:1B:DA:5D:D7
Authority key identifier: 7F:16:1A:CF:16:40:07:E8:F7:D8:C7:71:15:A5:A3:9D:04:36:48:F8
Certificate issuer:       /CN=A91E275B/serialNumber=7F161ACF164007E8F7D8C77115A5A39D043648F8
Certificate serial:       3568
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fxYazxZAB-j32MdxFaWjnQQ2SPg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E275B/AB2022301DA911E2B095C4A408B02CD2/fxYazxZAB-j32MdxFaWjnQQ2SPg.mft
Manifest number:          9CD7
Signing time:             Tue 18 Aug 2026 15:18:15 +0000
Manifest this update:     Tue 18 Aug 2026 15:18:15 +0000
Manifest next update:     Tue 25 Aug 2026 15:18:15 +0000
Files and hashes:         1: fxYazxZAB-j32MdxFaWjnQQ2SPg.crl (hash: 0rTsCX3DtU+OxAX33/Lm9ZbXD6rp85mJBwwAAKNvjOs=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E275B/AB2022301DA911E2B095C4A408B02CD2/fxYazxZAB-j32MdxFaWjnQQ2SPg.crl
                          rsync://rpki.apnic.net/member_repository/A91E275B/AB2022301DA911E2B095C4A408B02CD2/fxYazxZAB-j32MdxFaWjnQQ2SPg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fxYazxZAB-j32MdxFaWjnQQ2SPg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 25 Aug 2026 15:18:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13672 (0x3568)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E275B, serialNumber=7F161ACF164007E8F7D8C77115A5A39D043648F8
        Validity
            Not Before: Aug 18 15:18:15 2026 GMT
            Not After : Aug 25 15:18:15 2026 GMT
        Subject: CN=6a8477b7-6577
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:f8:f7:56:60:b3:8d:5b:bd:71:6e:06:47:ff:
                    29:09:a5:b7:f2:2d:bd:11:20:08:70:a3:68:a5:26:
                    3d:55:5d:af:ca:7a:80:4d:fc:63:59:67:2e:13:86:
                    5d:9b:32:4a:a7:65:45:86:fb:61:c9:78:ff:a7:e7:
                    cf:86:85:fb:4a:f4:86:46:5f:50:92:e3:58:0b:94:
                    20:8c:f7:c5:cb:8a:24:3b:33:3a:23:38:d7:6e:2b:
                    9c:ff:90:23:48:ef:c5:9b:3f:06:c8:a1:41:ac:16:
                    3f:8d:fd:95:f8:d8:88:22:c2:40:51:39:66:47:ca:
                    5d:4b:27:52:2b:1c:6e:85:a8:72:4f:8a:d9:00:cf:
                    af:49:41:80:c8:95:25:02:b3:3a:d7:55:6a:b5:c3:
                    53:d2:f0:14:a9:21:e8:66:fb:19:08:14:5b:e7:4c:
                    97:30:9c:73:15:f8:a7:72:15:33:28:4d:8e:99:2d:
                    1d:0b:08:5d:12:6a:51:c6:4e:58:ae:cc:56:0a:9c:
                    4c:9d:d8:31:17:1e:3c:5b:b4:bb:20:f2:a6:1c:97:
                    18:69:5e:6d:cc:ad:b0:8f:3a:bb:37:16:06:24:f8:
                    5c:1d:85:5f:1d:fb:57:00:b7:69:d4:11:e0:e1:c0:
                    d4:2d:cf:04:75:70:86:e1:4d:f4:1a:19:71:be:e5:
                    7c:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:A9:E5:6E:BB:12:08:78:0D:DC:74:E1:A2:52:D4:7C:1B:DA:5D:D7
            X509v3 Authority Key Identifier:
                keyid:7F:16:1A:CF:16:40:07:E8:F7:D8:C7:71:15:A5:A3:9D:04:36:48:F8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E275B/AB2022301DA911E2B095C4A408B02CD2/fxYazxZAB-j32MdxFaWjnQQ2SPg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fxYazxZAB-j32MdxFaWjnQQ2SPg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E275B/AB2022301DA911E2B095C4A408B02CD2/fxYazxZAB-j32MdxFaWjnQQ2SPg.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1e:2d:07:2e:0c:c6:fb:ab:fd:71:05:5c:6f:cb:31:27:b7:a3:
         de:17:05:55:25:c6:ea:af:2f:42:9b:f2:0b:fc:1b:b5:a8:48:
         41:b9:b8:f3:2c:df:b4:fb:a4:54:33:4f:aa:02:ba:f4:53:8e:
         48:8c:06:0d:44:ff:70:55:a6:20:c3:4a:b4:60:a7:4a:0d:b8:
         43:f1:07:fc:a6:86:ca:52:ab:e7:ee:64:90:60:9b:c4:e5:88:
         64:1b:36:74:5d:3c:b8:c9:5f:ad:fc:d0:8f:78:b8:6a:c1:d6:
         08:ae:eb:90:94:53:e8:ab:75:5c:c6:98:94:04:35:29:e6:92:
         10:d7:d0:4e:3b:e1:7b:10:6d:40:d5:18:e1:59:67:a5:34:22:
         89:bb:5e:83:78:5b:bf:9a:ac:c0:bd:fb:a0:6b:24:96:07:c9:
         89:43:74:59:d1:e8:d4:04:9b:ac:f6:1c:12:d9:9c:92:fe:d1:
         51:61:b7:34:65:e0:e4:bb:e6:90:ea:7c:f2:45:d9:58:b7:95:
         7e:28:d7:4e:6c:1e:1c:a9:1a:43:7f:37:d7:14:bd:5a:e2:e4:
         c9:bd:c5:2d:c9:fa:19:fc:3d:92:93:c3:9a:0e:8b:7f:fa:07:
         ba:72:5a:67:fe:4c:17:b1:a8:1f:65:77:31:a0:a8:c9:91:46:
         36:44:5d:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 11:45:30 2026 by rpki-client